CVE-2025-28915

CVE-2025-28915 - Exploit per Arbitrary File Upload in WordPress ThemeEgg ToolKit 📌 Descrizione Una vulnerabilità di Unrestricted File Upload nel plugin ThemeEgg ToolKit per WordPress versioni ≤ 1.2.9 consente a attaccanti autenticati di caricare web shell sul server. Ciò può portare a esecuzione...

CVE-2025-2249

🔐 Plugin WordPress SoJ SoundSlides ⚠️ DISCLAIMER: Questo exploit è solo per scopi educativi e di test autorizzati. 📌 Riepilogo della Vulnerabilità Plugin: SoJ SoundSlides Versioni interessate: = 1.2.2 Tipo: Caricamento Arbitrario di File Autenticato Contributor+ Stato della patch: ❌ Nessuna...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload Exploit FileOrganizer - CVE-2024-7985 📌 Panoramica CVE-2024-7985 - Il plugin WordPress FileOrganizer = 1.0.9 è vulnerabile a upload arbitrari di file autenticati , consentendo ad attaccanti con privilegi...

CVE-2024-9756

🚀 Exploit di Caricamento Arbitrario di File WooCommerce CVE-2024-9756 📌 Panoramica Questo exploit sfrutta una vulnerabilità di caricamento arbitrario limitato e non autorizzato nel plugin Order Attachments for WooCommerce versioni 2.0 - 2.4.1 per WordPress. La vulnerabilità consente a utenti...

CVE-2023-43482

CVE-2023-43482 TP-Link ER7206 Omada Gigabit VPN Router uhttpd freeStrategy Vulnerabilità di iniezione di comandi SOMMARIO Esiste una vulnerabilità di esecuzione di comandi nella funzionalità delle risorse ospiti guest resources di Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322...

CVE-2022-2992

CVE-2022-2992 Esecuzione remota di comandi autenticata in GitLab tramite importazione da GitHub. Una vulnerabilità in GitLab CE/EE che interessa tutte le versioni dalla 11.10 precedenti alla 15.1.6, tutte le versioni a partire dalla 15.2 precedenti alla 15.2.4, tutte le versioni a partire dalla...

wordpress-cve-2021-29447

Exploit WordPress CVE-2021-29447 Exploit dell'iniezione di entità esterne XXE autenticata XML nella libreria multimediale di WordPress per esfiltrare file. Corretto in WordPress 5.7.1. Richiede credenziali WordPress valide per interagire con la libreria multimediale. Utilizzo root@kitploit: pytho...

CVE-2020-10977

Exploit Python per lettura arbitraria di file in istanza privata di GitLab Alla data del 23/03/2020, un report di vulnerabilità con il suo PoC è stato rilasciato su HackerOne da William Bowling Con questa vulnerabilità possiamo leggere qualsiasi file leggibile da tutti con permesso 444 o superior...

CVE-2021-40870

CVE-2021-40870 Caricamento senza restrizioni di file con tipo pericoloso in Aviatrix consente a un utente autenticato di eseguire codice arbitrario https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

CVE-2026-16444

Improper neutralization of path traversal sequences in TeamViewer Desktop Clients prior Version 15.81.5 allows an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An attacker can levera...

CVE-2026-80350 OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

WordPress InfusedWoo Pro plugin <= 5.1.17 - Authenticated (Subscriber+) Privilege Escalation vulnerability

Authenticated Subscriber+ Privilege Escalation vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os in WordPress Plugin InfusedWoo Pro versions = 5.1.17...

CVE-2018-19422

CVE-2018-19422 root@kitploit: Exploit Title: File Upload Bypass to RCE Authenticated Google Dork: N/A Date: 17/05/2021 Exploit Author: Drew Alleman Based on an exploit written by: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version:...

CVE-2026-80237

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

WordPress CM Map Locations plugin <= 2.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via cmloc_route_image_upload AJAX Action vulnerability

Authenticated Subscriber+ Arbitrary File Upload via cmlocrouteimageupload AJAX Action vulnerability discovered by Spy0x7 in WordPress Plugin CM Map Locations versions = 2.1.8...

CVE-2026-16444

TeamViewer Desktop Clients prior to version 15.81.5 are affected by improper neutralization of path traversal sequences, allowing an authenticated remote session participant to write files to unintended locations on the local file system via file transfer or virtual file clipboard mechanisms. An ...

WBCE-v1.6.3-Authenticated-RCE

WBCE CMS printerror$MESSAGE'GENERICINVALIDADDONFILE'; Una volta che il modulo supera questo controllo come "Add-On valido", qualsiasi script install.php viene automaticamente eseguito sul server. Questo exploit usa semplicemente una reverse shell PHP come payload PHP...

CVE-2026-80237 Thinking Software Technology｜Efence - Arbitrary File Upload

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

EUVD-2026-66346

EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...

CVE-2026-80237

EFence , developed by Thinking Software Technology , suffers from an Arbitrary File Upload vulnerability. An authenticated remote attacker (low privileges) can upload and execute a web shell on the server, leading to arbitrary code execution with high impact on confidentiality, integrity, and ava...